Betterment / claws
💅🏽 analyzes your github actions
☆41Updated last week
Alternatives and similar repositories for claws
Users that are interested in claws are comparing it to the libraries listed below
Sorting:
- Simple plug-and-play Github Action to block unauthorized outbound traffic (egress) in your Github workflows☆110Updated this week
- A tool to check the security settings of Github Organizations.☆71Updated last year
- ☆54Updated this week
- Tools that checks for misconfigured access to Github OIDC from AWS roles and GCP service accounts☆61Updated 2 years ago
- ☆66Updated this week
- Security tool against dependency typosquatting attacks☆39Updated this week
- 🧪 Correlate Semgrep scans with Python test coverage to prioritize SAST findings and get bug fix suggestions via a self-hosted LLM.☆39Updated 5 months ago
- HashiCorp-relevant rules for the Semgrep code analysis tool☆41Updated last year
- GCP CSPM using Google Sheets☆36Updated last month
- Takes a software bill of materials and outputs provenance, and activity data from trustypkg.dev☆11Updated 7 months ago
- Automate vulnerability triage which prioritizes remediation over discovery☆18Updated this week
- Semgrep-based Policy Controller for Kubernetes☆47Updated last month
- Attaché provides an emulation layer for Cloud Provider IMDS APIs☆53Updated 10 months ago
- Compares and analyzes GCP IAM roles.☆77Updated 2 months ago
- ☆112Updated 4 months ago
- A security tool designed to help review merged code changes to open source maintained repositories via LLM assisted review to safeguard a…☆30Updated 6 months ago
- ☆72Updated this week
- ☆64Updated 3 months ago
- A comprehensive checklist and guide for organizations looking to implement a robust cybersecurity program☆27Updated this week
- Template Go app repo with local test/lint/build/vulnerability check workflow, and on tag image test/build/release pipelines, with ko gene…☆104Updated last year
- ☆35Updated 9 months ago
- Example repository for GitHub Actions Time of Check to Time of Use (TOCTOU vulnerabilities)☆23Updated 2 weeks ago
- A place for the InfoSec community to share and celebrate real stories of organizations successfully using SBOMs (and other bills of mater…☆42Updated last year
- prel(iminary) is an application that temporarily assigns Google Cloud IAM Roles and includes an approval process.☆44Updated this week
- This terraform provider can be used to get remote code execution by injecting a dummy resource in a writeable state file.☆54Updated 3 months ago
- Protect against subdomain takeover☆92Updated 11 months ago
- ☆47Updated this week
- TrailAlerts is a AWS-native, serverless cloud-detection tool that lets you define simple rules as code and get rich alerts about events i…☆36Updated last week
- A tool for preventing the installation of malicious PyPI and npm packages☆144Updated this week
- Format agnostic SBOM tooling☆106Updated this week